Vulnerabilities > CVE-2004-1965
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN exploit available
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 7 |
Exploit-Db
description OpenBB 1.0.x post.php TID Parameter XSS. CVE-2004-1965. Webapps exploit for php platform id EDB-ID:24054 last seen 2016-02-02 modified 2004-04-26 published 2004-04-26 reporter JeiAr source https://www.exploit-db.com/download/24054/ title OpenBB 1.0.x post.php TID Parameter XSS description OpenBB < 1.0.6 - Multiple Vulnerabilities. CVE-2004-1965. Webapps exploit for PHP platform id EDB-ID:43811 last seen 2018-01-24 modified 2004-04-24 published 2004-04-24 reporter Exploit-DB source https://www.exploit-db.com/download/43811/ title OpenBB < 1.0.6 - Multiple Vulnerabilities description OpenBB 1.0.x member.php redirect Parameter XSS. CVE-2004-1965. Webapps exploit for php platform id EDB-ID:24052 last seen 2016-02-02 modified 2004-04-26 published 2004-04-26 reporter JeiAr source https://www.exploit-db.com/download/24052/ title OpenBB 1.0.x member.php redirect Parameter XSS description OpenBB 1.0.x index.php redirect Parameter XSS. CVE-2004-1965. Webapps exploit for php platform id EDB-ID:24055 last seen 2016-02-02 modified 2004-04-26 published 2004-04-26 reporter JeiAr source https://www.exploit-db.com/download/24055/ title OpenBB 1.0.x index.php redirect Parameter XSS description OpenBB 1.0.x myhome.php to Parameter XSS. CVE-2004-1965. Webapps exploit for php platform id EDB-ID:24053 last seen 2016-02-02 modified 2004-04-26 published 2004-04-26 reporter JeiAr source https://www.exploit-db.com/download/24053/ title OpenBB 1.0.x myhome.php to Parameter XSS
References
- http://marc.info/?l=bugtraq&m=108301983206107&w=2
- http://marc.info/?l=bugtraq&m=108301983206107&w=2
- http://secunia.com/advisories/11481
- http://secunia.com/advisories/11481
- http://securitytracker.com/id?1009935
- http://securitytracker.com/id?1009935
- http://www.securityfocus.com/bid/10214
- http://www.securityfocus.com/bid/10214
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15966
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15966